[Sgt.TheDarkness]

Quote:

Originally Posted by RDM kalcor can not do anything if the attack is greater than your network can handle! kalcor only minimized the effects caused by the attack on the server! if you do not have enough bandwidth for the attack, nothing that kalcor does, will help you! this does not depend on the samp at the moment depends on your hosting company, if you have not hired any, the problem is yours! I believe most servers are online because they have enough bandwidth!

This has nothing to do with bandwidth at all.... Actually, as explained in previous posts, this attacks recreates the connection process to the sa-mp server and abruptly stops it. In addition, with the spoofed source address, the sa-mp server is aimlessly sending cookies out to bogon IP addresses. This is a CPU based attack, bandwidth is NOT affected, this attack is less than 1-2 megabytes of packets, not even CLOSE to a real bandwidth attack. You could theoretically reach larger packet sizes but I doubt those kids know anything about real packeting.


I've tested both of his patches locally with my tools and confirm his patches do NOT work, and I have a gigabit home-network. Fixing this would require an overhaul of the SA-MP querying system, which I doubt kalcor has time nor feels like doing. Get Ubi's plugin, compile it & add it to your server, this is the ONLY method that's stopped this attack.

EDIT: My mistake, the released patches were not for cookie flooding.